First seen May 22, 2026 · Last seen May 24, 2026 · Analyst (Mock)
Public preview
IOC type, status and defensive guidance visible. Pro adds alert context, Pro+ adds exports and deeper relationships.
Context
Mock DNS tunneling domain associated with Cluster-7749 infrastructure overlap analysis. Uses .test reserved TLD.
Defensive Guidance
Implement DNS query length monitoring. Deploy DNS tunneling detection. Review unusual TXT/CNAME query patterns.
Tags
Safety Note
Uses .test reserved TLD (RFC 2606). Not a real domain.
Actions
Related Threat Feed Items
Deeper context available with Pro++
View plans →
